From 2678559a3476c8e61b275aaa320196ec988e36d6 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 20 Jul 2020 04:00:19 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-KRAMDOWN-585939 --- Gemfile | 4 ++-- Gemfile.lock | 56 ++++++++++++++++++++++++++++++---------------------- 2 files changed, 34 insertions(+), 26 deletions(-) diff --git a/Gemfile b/Gemfile index 01ecd1ba6f..2cdc3ec886 100644 --- a/Gemfile +++ b/Gemfile @@ -6,8 +6,8 @@ source "https://rubygems.org" gem 'fastlane' gem 'cocoapods' -gem 'danger' -gem 'danger-swiftlint' +gem 'danger', '>= 6.0.0' +gem 'danger-swiftlint', '>= 0.17.3' plugins_path = File.join(File.dirname(__FILE__), 'fastlane', 'Pluginfile') eval_gemfile(plugins_path) if File.exist?(plugins_path) diff --git a/Gemfile.lock b/Gemfile.lock index 9cb0b4e656..4077430d76 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -7,11 +7,11 @@ GEM minitest (~> 5.1) thread_safe (~> 0.3, >= 0.3.4) tzinfo (~> 1.1) - addressable (2.5.2) - public_suffix (>= 2.0.2, < 4.0) + addressable (2.7.0) + public_suffix (>= 2.0.2, < 5.0) atomos (0.1.3) babosa (1.0.2) - claide (1.0.2) + claide (1.0.3) claide-plugins (0.9.2) cork nap @@ -56,19 +56,20 @@ GEM concurrent-ruby (1.0.5) cork (0.3.0) colored2 (~> 3.1) - danger (5.6.4) + danger (8.0.3) claide (~> 1.0) claide-plugins (>= 0.9.2) colored2 (~> 3.1) cork (~> 0.1) - faraday (~> 0.9) - faraday-http-cache (~> 1.0) - git (~> 1) - kramdown (~> 1.5) + faraday (>= 0.9.0, < 2.0) + faraday-http-cache (~> 2.0) + git (~> 1.7) + kramdown (~> 2.0) + kramdown-parser-gfm (~> 1.0) no_proxy_fix octokit (~> 4.7) terminal-table (~> 1) - danger-swiftlint (0.17.3) + danger-swiftlint (0.24.3) danger rake (> 10) thor (~> 0.19) @@ -80,13 +81,13 @@ GEM emoji_regex (0.1.1) escape (0.0.4) excon (0.62.0) - faraday (0.15.4) + faraday (0.17.3) multipart-post (>= 1.2, < 3) faraday-cookie_jar (0.0.6) faraday (>= 0.7.4) http-cookie (~> 1.0.0) - faraday-http-cache (1.3.1) - faraday (~> 0.8) + faraday-http-cache (2.2.0) + faraday (>= 0.8) faraday_middleware (0.12.2) faraday (>= 0.7.4, < 1.0) fastimage (2.1.5) @@ -129,7 +130,8 @@ GEM fourflusher (2.0.1) fuzzy_match (2.0.4) gh_inspector (1.1.3) - git (1.4.0) + git (1.7.0) + rchardet (~> 1.8) google-api-client (0.23.9) addressable (~> 2.5, >= 2.5.1) googleauth (>= 0.5, < 0.7.0) @@ -153,7 +155,10 @@ GEM concurrent-ruby (~> 1.0) json (2.1.0) jwt (2.1.0) - kramdown (1.17.0) + kramdown (2.3.0) + rexml + kramdown-parser-gfm (1.1.0) + kramdown (~> 2.0) memoist (0.16.0) mime-types (3.2.2) mime-types-data (~> 3.2015) @@ -169,24 +174,27 @@ GEM naturally (2.2.0) netrc (0.11.0) no_proxy_fix (0.1.2) - octokit (4.9.0) + octokit (4.18.0) + faraday (>= 0.9) sawyer (~> 0.8.0, >= 0.5.3) open4 (1.3.4) os (1.0.0) plist (3.4.0) public_suffix (2.0.5) - rake (12.3.1) + rake (13.0.1) + rchardet (1.8.0) representable (3.0.4) declarative (< 0.1.0) declarative-option (< 0.2.0) uber (< 0.2.0) retriable (3.1.2) + rexml (3.2.4) rouge (2.0.7) ruby-macho (1.2.0) rubyzip (1.2.2) - sawyer (0.8.1) - addressable (>= 2.3.5, < 2.6) - faraday (~> 0.8, < 1.0) + sawyer (0.8.2) + addressable (>= 2.3.5) + faraday (> 0.8, < 2.0) security (0.1.3) signet (0.11.0) addressable (~> 2.3) @@ -200,7 +208,7 @@ GEM terminal-notifier (1.8.0) terminal-table (1.8.0) unicode-display_width (~> 1.1, >= 1.1.1) - thor (0.20.0) + thor (0.20.3) thread_safe (0.3.6) tty-cursor (0.6.0) tty-screen (0.6.5) @@ -212,7 +220,7 @@ GEM unf (0.1.4) unf_ext unf_ext (0.0.7.5) - unicode-display_width (1.4.0) + unicode-display_width (1.7.0) word_wrap (1.0.0) xcodeproj (1.7.0) CFPropertyList (>= 2.3.3, < 4.0) @@ -230,9 +238,9 @@ PLATFORMS DEPENDENCIES cocoapods - danger - danger-swiftlint + danger (>= 6.0.0) + danger-swiftlint (>= 0.17.3) fastlane BUNDLED WITH - 1.16.1 + 1.17.3